Privacy Policy

Last updated: 2026-11-05

Who Is Responsible for Your Data

NutriFactsLabel is operated by Zhong Hui, an individual based in China. For the purposes of data protection law, Zhong Hui is the data controller for this site. Privacy questions and requests go to hello@nutrifactslabel.com.

What This Policy Covers

This policy explains what happens to information when you use NutriFactsLabel to build a Nutrition Facts or Supplement Facts label. It covers the label generator, the download flow, and the pages that describe them.

The Data You Enter

While you preview a label, the values you type — ingredient text, serving sizes, calories, nutrient amounts — are processed by JavaScript running in your browser. They are not sent to a server and not saved between visits: reloading the page returns the sample values. There is no account, so there is no profile to create, link, or delete. The tool does not track which fields you fill in.

What Is Stored When You Buy a Download

A paid download works differently from a preview, because the file is produced on our server and you may need to fetch it again later. When you complete a purchase we store the finished label — a vector file of roughly 12 KB — together with an order number, the product purchased, the amount, the time of purchase and the payment reference. We do not store your payment card details, and nothing you typed is stored unless you went through the paid download step.

The stored label has one purpose: delivering the file you paid for, and letting you download it again from Recover purchase if the first attempt fails or you change device. It is deleted automatically 7 days after purchase. Afterwards only the bare transaction record remains — order number, amount, date, payment reference — which we keep for accounting and refund handling.

Payment Details

Payments are processed by Waffo Pancake, which acts as the merchant of record for this site. Card details are entered on Waffo's checkout and go directly to Waffo; NutriFactsLabel never receives, sees, or stores a card number. Waffo collects the email address and billing details needed to process the order and issue a receipt, and handles that data under its own privacy policy. We do not keep your email address in our database; receipts and order confirmations come from Waffo.

Cookies and Analytics

The label generator loads no third-party analytics scripts, advertising pixels, or social widgets, and it sets no cookies of its own. Like any website, the hosting provider keeps standard request logs — IP address, timestamp, requested path, user agent — for security and troubleshooting. Those logs describe the request, not the label being built.

Service Providers

Two third parties are involved in a purchase: Waffo Pancake processes the payment as merchant of record, and Cloudflare hosts the site and the database that holds the order record and the stored label described above. Each receives only what it needs to perform its part.

Cloudflare runs a global network, so a request may be handled on servers outside China. Where data is transferred internationally we rely on the provider's standard contractual and security commitments for that transfer.

We Do Not Sell Your Information

We do not sell your personal information, and we do not share it with advertisers or data brokers. The only sharing that happens is the processing described above, carried out by Waffo Pancake and Cloudflare on our behalf.

How Long We Keep It

The stored label is deleted 7 days after purchase. The transaction record (order number, product, amount, date, payment reference) is kept for up to 7 years to meet tax and accounting obligations, then deleted. Hosting request logs are kept by Cloudflare for a short operational period and then discarded.

Your Rights

You can ask us to access, correct, delete, or provide a copy of the personal data we hold about you, and you can object to or ask us to restrict how it is used. Because there is no account, requests are handled by reference to your order number or the email address you paid with; write to hello@nutrifactslabel.com. We respond within 30 days, and we may ask for enough detail to confirm the order belongs to you.

Deleting a stored label before the 7-day window means the download can no longer be repeated, so we confirm with you before doing it. If you believe we have not handled your data correctly, you can complain to the data protection authority in your country.

Security and Incident Notification

Traffic is encrypted with TLS, the database is access-controlled, and only the people who operate the site can reach the stored labels. If a security incident affects your personal data, we notify affected users and the relevant authority within 72 hours of becoming aware of it.

Children

The service is intended for people aged 18 or over. We do not knowingly collect personal data from anyone under that age; if you believe a minor has provided data, contact us and we will delete it.

Changes to This Policy

If this policy changes, the revision date at the top of this page changes with it. Material changes are announced on this page at least 15 days before they take effect.

Contact

Privacy questions and data requests go to hello@nutrifactslabel.com. The rules for using the service are set out in our terms of service.